Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa
File:                     3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa (raw, json)
Hash identifier:          SUsISdDzncpQ9DqJJCVE6ITVEXefdVw0VfYWyLi5TP4=
Subject key identifier:   82:38:1B:1C:39:EF:D3:B8:AE:4E:B0:78:39:44:A5:80:E0:B2:08:63
Certificate issuer:       /CN=9128FD2FB3F69083F597C7967074F15DFCAC3130
Certificate serial:       6AF8AB1CB389D0BB32D384D47C623F583CE356DC
Authority key identifier: 91:28:FD:2F:B3:F6:90:83:F5:97:C7:96:70:74:F1:5D:FC:AC:31:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa
Signing time:             Thu 20 Mar 2025 13:52:14 +0000
ROA not before:           Thu 20 Mar 2025 13:47:14 +0000
ROA not after:            Thu 19 Mar 2026 13:52:14 +0000
asID:                     271650
IP address blocks:        179.63.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.crl
                          rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:ab:1c:b3:89:d0:bb:32:d3:84:d4:7c:62:3f:58:3c:e3:56:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9128FD2FB3F69083F597C7967074F15DFCAC3130
        Validity
            Not Before: Mar 20 13:47:14 2025 GMT
            Not After : Mar 19 13:52:14 2026 GMT
        Subject: CN=82381B1C39EFD3B8AE4EB0783944A580E0B20863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:85:a3:17:15:0a:03:a5:7c:a3:68:a6:cd:
                    db:d3:da:fc:10:81:f8:ac:14:32:3d:c6:17:49:87:
                    06:d8:40:4c:97:e8:e7:bb:cb:e9:8e:fd:dc:0f:3e:
                    cc:d9:e6:f7:31:0e:d8:76:6e:77:8e:d0:e4:5b:8e:
                    06:7e:28:3f:c7:59:0b:2c:0a:ae:66:4c:16:36:a1:
                    5d:74:17:6b:7b:2f:e9:14:8d:e1:a9:f4:a9:5c:02:
                    f5:37:ea:26:9e:2d:a4:95:43:a7:22:81:55:f0:e5:
                    a3:52:05:9f:e1:d0:62:33:0b:ea:17:09:0c:df:89:
                    17:78:72:c7:8f:5f:4e:7f:6c:d6:d8:8b:cb:32:60:
                    32:4d:bc:b3:16:38:ff:e0:a1:88:e9:5a:78:35:59:
                    86:62:a3:f1:85:31:77:b8:81:66:d5:be:82:9c:7c:
                    eb:7b:60:9d:03:86:f4:ce:f7:aa:f9:fc:45:d1:e0:
                    a5:8b:40:72:04:10:5b:24:48:ba:20:81:29:da:d0:
                    36:5d:64:bb:6c:2f:d2:b1:a7:78:b8:68:e3:9c:ca:
                    ac:10:c1:02:2a:8c:c3:f2:b9:55:69:d2:ec:cb:01:
                    6b:e0:0e:22:3e:c3:82:f8:10:07:59:f0:95:4e:3e:
                    39:ed:db:f0:1f:7f:90:98:02:70:54:90:ea:0f:be:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:38:1B:1C:39:EF:D3:B8:AE:4E:B0:78:39:44:A5:80:E0:B2:08:63
            X509v3 Authority Key Identifier:
                keyid:91:28:FD:2F:B3:F6:90:83:F5:97:C7:96:70:74:F1:5D:FC:AC:31:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/9128FD2FB3F69083F597C7967074F15DFCAC3130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9128FD2FB3F69083F597C7967074F15DFCAC3130.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3234203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:8f:9a:e7:03:d2:ab:0b:9e:79:2f:08:b2:88:39:ab:48:
         a9:b7:71:5d:41:3c:57:9d:da:3e:d8:53:3d:b4:e0:c6:a4:93:
         ae:69:b8:08:49:fe:d8:b6:5f:16:4a:90:f5:b3:02:e9:60:de:
         77:b4:87:72:e0:3a:ad:c0:bb:e8:6e:60:2f:d5:27:2a:9d:c0:
         99:46:1e:24:74:8d:7e:d8:7e:bb:9f:99:49:e0:1f:b1:21:86:
         c6:0f:42:19:f4:0c:b1:fc:6d:20:cb:de:3d:81:62:e7:4c:22:
         77:0e:e7:55:db:df:27:41:8a:72:6c:bb:de:c2:f8:fd:b5:45:
         fd:75:6e:67:5e:32:ad:54:03:1c:4f:2b:e7:0e:85:8d:0a:a2:
         09:c4:9f:57:ae:50:4e:f3:53:7d:c9:35:ac:d6:e3:3b:3e:35:
         53:ed:13:13:78:20:be:a1:2a:72:a4:cf:d2:3c:2d:a8:31:fb:
         77:a6:cc:ae:8d:22:fe:d0:9f:7b:c3:3c:a3:38:8e:61:cc:8a:
         35:82:c4:98:d6:4a:ed:7a:ac:fb:7c:f6:61:36:24:e8:97:ea:
         b7:8b:37:65:29:b6:04:27:5c:d2:04:21:b2:8d:95:65:7e:04:
         b0:a5:8a:ee:d8:c6:fb:f1:4d:e3:15:ab:a9:ad:b1:be:7f:02:
         30:0f:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:27 2025 by rpki-client on console.sobornost.net